Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft
File:                     15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft (raw, json)
Hash identifier:          y7SNy6Lu33r2dGzgO5QO3Zu0EoVA1UvWcWHiZ/BddV8=
Subject key identifier:   CE:8D:A0:A3:3E:05:A2:45:CA:98:F4:41:74:DA:EE:10:5A:DA:6A:EE
Authority key identifier: D7:95:A7:25:9F:95:37:18:64:93:F4:82:D5:5C:EF:4B:64:B1:C4:35
Certificate issuer:       /CN=d795a7259f9537186493f482d55cef4b64b1c435
Certificate serial:       019D3307A6FD68210FE4FC8B5B85D322DDB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/15WnJZ-VNxhkk_SC1VzvS2SxxDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft
Manifest number:          1091
Signing time:             Sat 28 Mar 2026 06:00:32 +0000
Manifest this update:     Sat 28 Mar 2026 06:00:32 +0000
Manifest next update:     Sun 29 Mar 2026 06:00:32 +0000
Files and hashes:         1: 15WnJZ-VNxhkk_SC1VzvS2SxxDU.crl (hash: zDYBWS9CVUz6m30BYleqPsYWa11eo3/brmudSvPp79w=)
                          2: i76W5DkDxFqXL1U4LEioLLQPWHE.roa (hash: wjKq780qwNn7oCMWX/g2VF2AWfHDNkvvk88MaGruKxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/15WnJZ-VNxhkk_SC1VzvS2SxxDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:33:07:a6:fd:68:21:0f:e4:fc:8b:5b:85:d3:22:dd:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d795a7259f9537186493f482d55cef4b64b1c435
        Validity
            Not Before: Mar 28 06:00:32 2026 GMT
            Not After : Mar 29 06:00:32 2026 GMT
        Subject: CN=ce8da0a33e05a245ca98f44174daee105ada6aee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2c:c1:6b:fb:48:0a:79:d4:80:94:ad:4f:67:
                    37:76:0d:33:2f:82:b4:a4:2b:91:1e:a8:d6:94:97:
                    79:49:a7:21:55:71:99:12:93:86:69:86:01:1a:b1:
                    44:24:af:3a:e6:95:2f:5f:84:3e:95:94:0c:c0:87:
                    7e:64:96:bf:19:15:bb:85:49:c8:5a:e0:2c:b7:51:
                    ef:f6:4c:18:cf:6f:66:6f:ef:52:fd:73:dd:0d:13:
                    ac:fa:30:9b:98:58:7c:f2:2d:fe:94:5d:2f:f7:25:
                    31:44:5f:41:14:12:35:bc:2b:b1:54:18:88:3b:d5:
                    f8:97:68:1c:95:17:62:75:5e:bd:82:3b:d2:5d:95:
                    6c:3d:01:e8:fb:c1:c3:28:aa:db:9c:f9:bd:60:ad:
                    c5:df:40:b9:ec:e8:e1:ea:22:88:ba:a2:89:16:ec:
                    89:31:86:f2:52:95:9b:a8:c1:17:9e:76:16:6a:fe:
                    b8:8e:00:19:b6:ac:d8:3e:b3:a2:3c:02:bc:4c:ac:
                    30:82:90:6b:b6:9f:f7:30:ab:2e:84:6d:e2:dc:5d:
                    69:63:6b:59:56:d2:f3:b2:71:6f:0e:f7:ad:29:23:
                    7e:0d:c3:34:ec:a6:64:41:94:c3:89:6c:4a:9c:2e:
                    06:62:8f:51:9e:c6:e6:23:21:a0:37:b2:a0:1b:73:
                    01:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:8D:A0:A3:3E:05:A2:45:CA:98:F4:41:74:DA:EE:10:5A:DA:6A:EE
            X509v3 Authority Key Identifier:
                keyid:D7:95:A7:25:9F:95:37:18:64:93:F4:82:D5:5C:EF:4B:64:B1:C4:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15WnJZ-VNxhkk_SC1VzvS2SxxDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:80:42:ba:fe:45:11:8d:58:a5:c6:78:0b:24:c9:b4:7a:df:
         61:1e:cf:b8:43:1c:99:e7:81:35:41:8a:9b:2d:c6:f0:86:49:
         5b:23:17:70:19:c3:a7:c8:86:03:4c:fb:7b:18:1b:f7:cc:ae:
         f2:2e:ae:3c:6e:f5:83:ce:0f:06:aa:64:1f:28:ce:17:46:96:
         60:dc:39:d3:14:e2:2e:15:1d:9a:14:f1:30:9d:51:54:22:e9:
         5d:00:45:bd:e6:c1:07:23:a2:98:6f:2d:bf:a7:f4:ef:4e:30:
         ee:e0:f1:72:67:ea:95:87:34:f3:74:03:27:b4:9c:58:cb:d9:
         1c:42:f7:52:94:5d:48:b0:1f:09:36:6f:d1:be:54:1e:6a:06:
         42:35:8b:15:6a:f1:48:00:d5:80:fe:fe:8a:ba:0e:83:d3:bc:
         31:0b:26:b0:f8:77:e3:75:78:f8:77:23:da:27:be:a9:b4:ba:
         86:bf:1b:40:58:b1:7f:72:a9:7e:4e:50:e2:2e:99:a4:c2:a3:
         2c:06:33:40:67:d9:2f:61:b5:2a:6e:37:03:43:3f:82:61:06:
         38:a8:a7:16:05:a2:52:4e:18:2a:cd:c3:f6:6e:a6:fe:e5:d5:
         d2:f1:62:3e:69:af:b2:b8:e9:6a:a7:d3:ce:a7:c6:78:16:86:
         43:10:4a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:15:19 2026 by rpki-client